The law, without the alarmism.
Lawful surveillance sits at the three-way intersection of communications law, law enforcement and subscriber privacy. This is where we explain it, in plain English, without the hype, from the TTP (trusted third party) that lives it every day.
Does CALEA apply to you?
Almost certainly. Since the FCC's 2005 First Report and Order, CALEA reaches the vast majority of communications service providers, including broadband, VoIP, wireless and hosted IP providers whose services interconnect with the public switched network. "Our hardware came CALEA-compliant from the factory" is where most providers get it wrong: compliance is a capability you operate, not a checkbox you buy. New to this? Start with our CALEA compliance FAQ, the plain-English lawful access explainer, or the glossary.
Capability
Your network must be able to implement a lawful intercept, to the industry safe-harbor standard for your network type.
Court-order handling
Orders must be authenticated and reviewed: an invalid order risks inadmissible evidence and real liability.
Delivery
Collected communications must reach the agency's monitoring center in the required format and standard (ATIS, ETSI).
Privacy
Everything above must happen without touching the traffic of subscribers who aren't named in the order.
Between your network and the agency.
Subsentio stands in the middle: the order is validated, the target is provisioned on your network, and the intercept is delivered to law enforcement in the required standard — ATIS in the United States, ETSI internationally.
A court order is validated by Subsentio; the target is provisioned on the provider's network; the intercepted call data and content are mediated into the ATIS delivery standard (ETSI outside the United States) and delivered over a secured connection to the law-enforcement agency's collection system; every step is logged and the intercept ends on the order's date.
Your network
- Switch · SBC · router
- Broadband · VoIP · IPES · LTE
- Target provisioned, nothing else touched
Subsentio
- Order validated
- Access + mediation
- Delivered to standard
Law enforcement
- Collection system
- Secured connection
- Terminated on the order's date
Who's in, and who's out.
CALEA Section 102 covers any entity "engaged in the transmission or switching of wire or electronic communications as a common carrier for hire." The statute was written in 1994, so applying it to modern networks takes some translation. The short version — or see the full breakdown by provider type:
Covered
Wireline, wireless, satellite, facilities-based broadband and two-way interconnected VoIP. Resellers and MVNOs too, the reseller's duty is ensuring its facilities-based wholesaler has a CALEA solution in place, written into the wholesale agreement.
Exempt
Private networks — a university research network, a bank's ATM system, a corporate PBX — as long as they are not "to the public." Interexchange and pure backbone carriers ("a carrier's carrier") are generally treated as exempt interconnecting carriers, since law enforcement intercepts through the last-mile provider instead.
Everyone, either way
Exempt from CALEA is not exempt from assisting. Every operator still owes "reasonable assistance" when lawful surveillance is implemented on its network — and whether a backbone carrier is exempt is a point neither the statute nor the FCC's rules expressly address, so the safer question is what you would actually do when served.
CALEA in nine sections, plain English.
The full text is in the library below. Here's what each operative section actually does:
Definitions
Defines the terms that decide everything else, "telecommunications carrier," "call-identifying information," "information services."
Capability
The core duty: the technical capabilities a covered carrier must deliver to law enforcement when served with a surveillance order.
Capacity
The Attorney General's notice of how many simultaneous intercepts law enforcement may need, by network type and market.
Security
The privacy backstop: an interception can be activated only under a court order or other lawful authorization, and only with the affirmative intervention of the carrier's own personnel.
Manufacturers
Equipment vendors must make CALEA solutions available to their carrier customers in reasonable time, at reasonable cost.
Safe Harbor
The provision this company is built on: conform to an industry standard and you "shall be found to be in compliance." It's the basis of our Safe Harbor Compliance Program.
Enforcement
Courts can order compliance and impose civil penalties of up to $10,000 a day, unless compliance is "not reasonably achievable" or law enforcement has reasonable alternatives.
Cost Recovery
If compliance is "not reasonably achievable," the Attorney General pays for the upgrade, or the carrier is deemed compliant without it.
Appropriations
Congress authorized $500,000,000 (fiscal years 1995–98) to fund the §109 retrofit of network equipment deployed on or before January 1, 1995.
Statutes, standards and source documents.
The primary documents — the statute, the FCC orders that extended it, the privacy law that constrains it, the guides — each with a page that explains it, and the full text to download at the bottom.
The obligation, explained from every side.
Plain-English explainers, the standards, the statutes, the decision guides and the glossary — written by the Trusted Third Party that operates this discipline every day.
Lawful access, explained
Intercepts versus records, the legal process behind each, the chain from switch to agency, and where warrant management fits.
What a CALEA Trusted Third Party does
What the FCC permits, what stays with the carrier, the in-house-versus-TTP decision department by department, and how to choose.
IPES providers and CALEA
VoIP providers filing for direct access to numbers must certify CALEA compliance with evidence. What the rule requires and how to meet it.
Electronic surveillance standards
ATIS in the United States, ETSI internationally, 3GPP for mobile — the delivery standards, and why they are the safe harbor.
Federal surveillance statutes
The Wiretap Act, FISA, ECPA, CALEA, the PATRIOT Act and the FISA Amendments Act, explained as one system.
State surveillance statutes
Fifty states, fifty rules: which permit wiretaps and pen-traps, the exclusionary rule, and what a provider does with a state order.
CALEA compliance FAQ
What CALEA is, who needs it, what it costs, and how to comply — the questions carriers ask first.
The glossary
CALEA, LAES, TTP, safe harbor, § 2703(d), preservation, exigent, DMCA safe harbor — every term, defined.
For law enforcement
What every court order must contain, how to reach the desk, and what Subsentio is to an agency serving one of its customers.
A decade of plain-English analysis.
From Apple v. the FBI to the CLOUD Act, from going-dark to state surveillance statutes, our government-affairs commentaries cover the controversies where law enforcement access meets subscriber privacy. Sixty-plus essays, all in the blog.
Read the commentary →
Still have questions?
Ask the experts, real answers to specific compliance questions, from the TTP (trusted third party) that operates this discipline every day.